chore(deps): bump the dependencies group across 1 directory with 7 updates#210
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the dependencies group across 1 directory with 7 updates#210dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…dates Bumps the dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fastify/http-proxy](https://github.com/fastify/fastify-http-proxy) | `11.4.4` | `11.5.0` | | [pino](https://github.com/pinojs/pino) | `9.7.0` | `10.3.1` | | [pino-loki](https://github.com/Julien-R44/pino-loki) | `2.6.0` | `3.0.0` | | [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.0.0` | `13.1.3` | | [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `2.0.4` | `2.0.10` | | [undici](https://github.com/nodejs/undici) | `7.24.1` | `8.3.0` | | [zod](https://github.com/colinhacks/zod) | `3.25.75` | `4.4.3` | Updates `@fastify/http-proxy` from 11.4.4 to 11.5.0 - [Release notes](https://github.com/fastify/fastify-http-proxy/releases) - [Commits](fastify/fastify-http-proxy@v11.4.4...v11.5.0) Updates `pino` from 9.7.0 to 10.3.1 - [Release notes](https://github.com/pinojs/pino/releases) - [Commits](pinojs/pino@v9.7.0...v10.3.1) Updates `pino-loki` from 2.6.0 to 3.0.0 - [Release notes](https://github.com/Julien-R44/pino-loki/releases) - [Commits](Julien-R44/pino-loki@v2.6.0...v3.0.0) Updates `pino-pretty` from 13.0.0 to 13.1.3 - [Release notes](https://github.com/pinojs/pino-pretty/releases) - [Commits](pinojs/pino-pretty@v13.0.0...v13.1.3) Updates `ua-parser-js` from 2.0.4 to 2.0.10 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/CHANGELOG.md) - [Commits](faisalman/ua-parser-js@2.0.4...2.0.10) Updates `undici` from 7.24.1 to 8.3.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.24.1...v8.3.0) Updates `zod` from 3.25.75 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.75...v4.4.3) --- updated-dependencies: - dependency-name: "@fastify/http-proxy" dependency-version: 11.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pino dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pino-loki dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pino-pretty dependency-version: 13.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ua-parser-js dependency-version: 2.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: undici dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 7 updates in the / directory:
11.4.411.5.09.7.010.3.12.6.03.0.013.0.013.1.32.0.42.0.107.24.18.3.03.25.754.4.3Updates
@fastify/http-proxyfrom 11.4.4 to 11.5.0Release notes
Sourced from @fastify/http-proxy's releases.
Commits
94c731fBumped v11.5.05c2e54cfeat: Added handler option. (#465)833d446chore: ignore AI files360d23bchore(.gitattributes): retain binary file eol style (#462)528b230refactor(types): migrate from tsd to tstycheUpdates
pinofrom 9.7.0 to 10.3.1Release notes
Sourced from pino's releases.
... (truncated)
Commits
6b34498Bumped v10.3.1f1203e6fix(transport): sanitize invalid NODE_OPTIONS preloads for workers (#2391)6a8e598docs: clarify transport level filtering behavior (#2390)49a4807Merge branch 'main' of github.com:pinojs/pino960bbbbbuild(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.23.2 (#2386)e2a5b4abuild(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#2385)04859e2chore: update gitignore for ai assistant filesd6adf03Bumped v10.3.006d55b1feat: set worker thread name for transport identification (#2380)a728702fix: fixmultistream().clone()return type (#2377)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for pino since your current version.
Updates
pino-lokifrom 2.6.0 to 3.0.0Release notes
Sourced from pino-loki's releases.
Commits
c042352chore: release v3.0.0528c6a4style: lint filesba7b17echore!: remove deprecated CLI options5de977efix!: change timeout default value43ebb6cfeat!: usemetaas default structured meta keydb75124fix: avoid duplicate buffer flush on transport shutdownfeb0408chore!: update dependencies ( drop node 18 )d6d1accfix: remove hostname from log object before formattinge00e6cafeat!: add maxBufferSize option + update batching API66ccf05chore: remove basicAuth options from debugUpdates
pino-prettyfrom 13.0.0 to 13.1.3Release notes
Sourced from pino-pretty's releases.
... (truncated)
Commits
08425cdv13.1.36afb524fix: messageFormat print 0 value (#635)70c73eabuild(deps): bump fast-copy from 3.0.2 to 4.0.0 (#637)2cd9794build(deps): bump actions/checkout from 5 to 6 (#636)c06e276Update format-time.js documentation to match functionality (#632)47ffb45build(deps): bump pino-abstract-transport from 2.0.0 to 3.0.0 (#629)932af85build(deps-dev): bump pino from 9.14.0 to 10.1.0 (#628)6d48318build(deps-dev): bump borp from 0.20.2 to 0.21.0 (#627)3b89a0cbuild(deps): bump actions/setup-node from 4 to 6 (#626)ab0ccabAdd in the README file a snippet to use pino-pretty only for dev (#623)Updates
ua-parser-jsfrom 2.0.4 to 2.0.10Release notes
Sourced from ua-parser-js's releases.
... (truncated)
Changelog
Sourced from ua-parser-js's changelog.
... (truncated)
Commits
4121c59Build: Bump version2.0.1090354d3Fix: Prevent ReDoS vulnerability by limiting Client Hints input length (GHSA-...3baa3bcTest: Increase nyc timeout to fix timeout error18d39b5CI: Add GitHub Actions workflow to publish to Docker Hub58b5a0cBuild: Add Dockerfile for container image build965c20dCI: Update fuzz testad97feaBuild: Set sideEffects=false in package.json for tree shaking (#781)312598fCI: Add AI and spam detection to pull request workflow8f9e4dcTest: Fix relative path and update done() callback in CLI test speceb809ecChore(license): Add THIRD_PARTY_NOTICES.md for third-party assetsUpdates
undicifrom 7.24.1 to 8.3.0Release notes
Sourced from undici's releases.
... (truncated)
Commits
aa33b19Bumped v8.3.0 (#5305)f33a6cbtest: fix flaky http2-dispatcher WebSocket upgrade tests (#5304)ca0cb16build(deps): bump uWebSockets.js in /benchmarks (#5299)e1f9035build(deps-dev): bump jest from 30.3.0 to 30.4.2 (#5297)314ba6aperf(client-h2): reuse request upgrade stream handlers (#5293)be9a544Add Node 26 to the matrix (#5271)45f7bd3test: retry crashed cache-test workers once (#5294)08cf765build(deps-dev): bump fast-check from 4.7.0 to 4.8.0 (#5298)df5ded9cache formdata boundary (#5292)e101dcbtest: include after in parser-issues (#5284)Updates
zodfrom 3.25.75 to 4.4.3Release notes
Sourced from zod's releases.
... (truncated)
Commits
1fb56a5docs: document release procedure in AGENTS.mdf3c9ec04.4.3c2be4f8fix(v4): generalize optin/fallback to transform; restore preprocess on absent...1cab693fix(v4): restore catch handling for absent object keys (#5937) (#5939)b8dffe9docs: remove Numeric and Speakeasy (2+ missed monthly cycles)9195250docs: remove Mintlify from bronze sponsors (churned)2c70332docs: normalize bronze sponsor logos to github avatar pattern7391be8docs: prune lapsed silver/bronze sponsors and add active ones2aeec83docs: prune lapsed gold sponsors and rebalance logo sizing4c2fa95docs: use Zernio primary wordmark for gold sponsor logoMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions